One protects them from you. The other protects you from your own people.
They're both called bonds, and they're opposites. A surety bond guarantees your performance to somebody else — and you sign an indemnity agreement promising to pay the surety back if it ever pays a claim. Crime and fidelity coverage is the reverse: real first-party insurance protecting your business from theft and fraud by its own staff. And if you sponsor a retirement plan, there's a third one federal law already requires you to carry. We place all of it across 40+ markets.
The short answer
Surety is a three-party guarantee: you (the principal), the party protected (the obligee), and the surety standing behind you. It's underwritten as credit, not insurance — and the indemnity agreement means a paid claim comes back to you. Crime and fidelity is genuine first-party insurance covering employee theft, forgery, funds transfer fraud and money losses — none of which your general liability or property policy covers. And an ERISA fidelity bond is required by federal law if you sponsor a plan.
A bond has three parties, and it doesn't protect the one paying for it.
Insurance is two parties and a transfer of risk. Surety is three parties and a guarantee of performance. Almost every surprise on this product traces back to that one difference.
The surety expects to be paid back.
This is the thing almost nobody is told at the counter, and finding it out at claim time is how businesses lose relationships they thought were insurance.
When a bond is written, the principal signs a general indemnity agreement — a contract obliging it to reimburse the surety for the losses, costs and expenses the surety incurs under the bond. On most small and mid-sized accounts, the owners sign personally as well, and the agreement frequently reaches spouses and affiliated entities. So when a surety pays, it generally has a contractual right to recover that money from you.
Which reframes the whole product. A bond is not a financial cushion. It is a statement of confidence. The surety is telling the obligee it believes you will perform — and protecting itself if you don't. That's exactly why the underwriting looks like a bank submission rather than an insurance application, and why capacity is something you build over years rather than buy in an afternoon.
Read the indemnity agreement before signing, know who else is being asked to sign it, and treat a bond claim as a serious business event rather than an insurance event. This is general information and not legal advice — an indemnity agreement is a contract worth having counsel review.
Contract surety, commercial surety, and the ones a court orders.
Bid bonds
Guarantee that if you win, you'll enter the contract and furnish the required performance and payment bonds. The obligee's protection against a bidder walking away from its own number.
Performance bonds
Guarantee completion of the contract according to its terms. If the principal defaults, the surety's options generally include financing the contractor, tendering a replacement, or paying the obligee.
Payment bonds
Guarantee that subcontractors, laborers and suppliers get paid. On public work this matters enormously, because a mechanics lien generally can't attach to public property — the bond is often the only remedy.
License and permit bonds
Required by a government body as a condition of holding a license or permit — contractor license, motor vehicle dealer, notary, alcohol and tobacco, freight broker, right-of-way permits. Protects the public, not the license holder.
Judicial and probate bonds
Appeal, injunction and attachment bonds in litigation; administrator, executor, guardian and conservator bonds where a court appoints someone to handle another party's assets.
Subdivision and site bonds
Required by a municipality to guarantee that a developer completes public improvements — streets, drainage, utilities — before the obligation transfers. Common on growing Northwest Arkansas developments.
Public works bonding, and a five-day window that catches subcontractors.
Arkansas has its own version of the federal Miller Act — commonly called the Little Miller Act — at Ark. Code §§ 22-9-401 through 22-9-405, with companion provisions in Title 18. Broadly, contractors on public works projects above a statutory threshold must furnish bonds securing performance of the work and payment of subcontractors, laborers and suppliers. That payment protection carries more weight on public work than private work, because a mechanics lien generally cannot attach to public property — so for an unpaid sub or supplier, the bond is frequently the only realistic remedy.
Two provisions are worth knowing specifically. Bonds under the chapter must be written by surety companies qualified and authorized to do business in Arkansas and listed on the current United States Department of the Treasury listing of approved sureties, and the executing agent must be licensed by the Insurance Commissioner and must file the power of attorney with the bond. And the liability the statute imposes is deemed an integral part of the bond whether or not it is spelled out in the bond itself — the statutory terms are read in regardless of the wording on the page.
Five days. You cannot build a surety relationship in five days.
Under the Arkansas public works bonding provisions, where the general contractor requires it, a subcontractor must furnish a payment and performance bond — or a cash bond — equal to the full amount of its bid when three things are true: it is the low responsible bidder for that portion, the state requires the GC to list it in the GC's bid, and the work value of its bid exceeds fifty thousand dollars.
And it must provide that bond to the general contractor within five days after the award.
Five days is the part that matters, because surety underwriting is a credit process, not a form. A first-time submission commonly involves business and personal financial statements, a work-in-progress schedule, bank and supplier references, and a general indemnity agreement that owners are asked to sign personally. None of that assembles itself inside a working week — and a surety meeting you for the first time on day one of five is not going to move at that speed.
So the practical rule for any subcontractor doing Arkansas public work is simple: establish the surety relationship before you bid, not after you win. Getting prequalified costs nothing and takes the pressure out of the award. If you're bidding listed work above the threshold, that conversation should already have happened.
General information, not legal advice, and not a determination that any bonding requirement applies to any project or bid. We are not publishing a general Little Miller Act contract threshold — available secondary sources conflict on it, and it is not a number worth guessing at; confirm requirements, thresholds and claim deadlines against the current code and with qualified construction counsel. Oklahoma, Missouri and Texas have their own public works bonding statutes with different thresholds, notice requirements and deadlines.
Crime coverage: the one that actually protects you.
Commercial crime — still often called fidelity — is genuine first-party insurance against loss of your own money, securities and property through dishonesty. It is the coverage most owners assume is somewhere in the package, and frequently isn't.
General liability answers third-party claims. Property answers damage and carries only limited money coverage. Theft by your own staff is a first-party financial loss and needs its own insuring agreement.
The insuring agreements, and what each one is actually for.
Three things worth checking on your current program rather than assuming. Whether employee theft is present at all, since it is frequently absent or sitting at a token limit nobody deliberately chose. How the policy defines "employee" — temporary staff, leased workers, volunteers, contractors and recently departed employees are not always included. And whether the discovery period and any prior-loss conditions leave a gap if you change carriers, since these schemes are often running for a long time before anyone notices.
When an employee is tricked, nobody stole anything.
That sentence is the whole social engineering problem. Someone impersonates an executive, a vendor or a client; a legitimate employee is deceived into authorizing a transfer or updating payment instructions. No break-in, no dishonest employee, no unauthorized system entry — so the loss commonly falls outside employee theft, outside computer fraud and outside funds transfer fraud as those agreements are usually written. The employee acted with authority and the business parted with the money voluntarily.
Coverage is usually addressed by a separate social engineering or deception fraud endorsement, typically with a much smaller sublimit than the main crime limit and often with conditions such as required callback verification. Wording and availability vary considerably, so confirm it specifically.
It is also one of the few exposures where process beats insurance. Verifying any change to payment details by calling a phone number you already had — never one supplied in the request — prevents most of these losses outright. Worth reviewing alongside cyber liability, since the two policies draw the boundary in different places.
If you sponsor a retirement plan, you're already required to carry a bond.
Everything above is bought because a contract, an obligee or good judgment calls for it. This one is different: it is required by federal law, it applies regardless of which state you're in, and a great many businesses that sponsor a plan don't know it exists.
Section 412 of ERISA requires that every fiduciary of an employee benefit plan — and every person who handles funds or other property of the plan — be bonded. "Handling" generally means having authority to transfer funds, negotiate property for value, or disburse or direct the disbursement of plan assets, so it commonly reaches owners, officers, plan committee members and certain service providers.
Your fiduciary liability policy does not satisfy it.
This is the confusion the Department of Labor has addressed directly, and it catches careful businesses. The two products protect different parties against different things, and neither substitutes for the other.
The ERISA fidelity bond protects the plan against loss caused by fraud or dishonesty by the people handling its funds. It is required by section 412. Fiduciary liability insurance protects the fiduciaries against claims that they breached their duties — imprudent investment selection, excessive fees, poor process. Department of Labor guidance states that fiduciary liability insurance is neither required by nor subject to section 412, and Form 5500 instructions provide that a fiduciary liability policy cannot be reported as fidelity bond coverage.
So a business can carry a fiduciary liability policy in good faith, believe the bonding requirement is handled, and be out of compliance — with the gap visible on its own annual filing. Inadequate ERISA bonding is reported to be among the more common plan compliance failures, which is unsurprising given how easily it hides behind a policy that sounds like it covers the same ground.
Sponsors who take this seriously generally end up carrying both, because they answer different questions. The bond answers who repays the plan if someone steals from it. The insurance answers who defends you if someone says you ran it badly. Unfunded plans paying benefits solely from general assets are treated differently. General information, not legal, tax or ERISA advice — confirm your specific obligations with your plan advisor, third-party administrator or counsel. Fiduciary liability is a separate product and sits alongside directors and officers coverage in a management liability program.
Six situations, and which one is actually the answer.
| What happened | Surety bond | Crime / fidelity | Who ends up paying |
|---|---|---|---|
| You default on a bonded public contract | Performance bond responds | Not applicable | You, via indemnity |
| You fail to pay a sub on a bonded job | Payment bond responds | Not applicable | You, via indemnity |
| A bookkeeper diverts funds over two years | Not applicable | Employee theft | The carrier |
| Someone forges checks on your account | Not applicable | Forgery or alteration | The carrier |
| Staff wire funds to a fake vendor after a spoofed email | Not applicable | Often needs an endorsement | Depends on the form |
| Someone steals from the company retirement plan | ERISA fidelity bond | Only if the plan is named | The carrier, to the plan |
A general illustration only. Actual response depends on the bond form, the policy language, definitions, endorsements, exclusions and the facts.
Which bonding and crime issues should you review?
Select what applies. The tool characterizes exposure and flags topics worth raising with an agent — it does not calculate a bond amount, recommend a limit or quote a price. Educational only.
What does your business do, and who touches the money?
Areas to review
Want an agent to review your bonding capacity and your crime limits?
Start Your QuoteCapacity is built, not bought.
The failures here are mostly timing and structure. A subcontractor prequalified on the day it needs a bond, against a five-day statutory window. An indemnity agreement signed without reading who else it binds — spouses, affiliates, entities that had nothing to do with the job. Capacity requested at the size of the biggest job the business ever wants, rather than grown as the financials support it. Financial statements prepared to minimize tax, then submitted to a surety that reads working capital and net worth as the whole story. Employee theft absent from the package entirely, or present at a token limit nobody chose. A crime policy whose definition of employee excludes the temp who did the stealing. A social engineering endorsement assumed present and never confirmed. And no ERISA bond at all, on a plan that discloses the fact annually on its own Form 5500.
What we do about it: get contractors prequalified with a surety before public bids rather than after awards; explain the indemnity agreement in plain terms and tell you who is being asked to sign; help present the financials a surety actually reads, including the work-in-progress schedule; work on capacity as a relationship over years rather than a transaction; check that employee theft exists, at a limit that reflects how much money moves through the business, with a definition of employee that covers who really works there; confirm social engineering specifically rather than assuming; and ask every plan sponsor the ERISA question, because it takes one minute and the answer is uncomfortable more often than it should be. We don't adjust your claim and can't overrule an adjuster or a surety — but we build the program to respond, across 40+ markets.
Surety is priced on credit. Crime is priced on controls.
Surety is generally rated against the bonded amount, with the rate driven by the classic three Cs — character, capacity and capital: financial strength and working capital, the length and quality of the track record, experience with work of this type and size, the work-in-progress schedule and how much is already bonded, banking relationships, the owners' personal financial position and credit, and the obligee's bond form. License and permit bonds are usually far simpler and are frequently issued quickly for applicants with reasonable credit. Crime and fidelity is rated on something else entirely — employee count, how much money moves and how, separation of duties between whoever authorizes payments and whoever reconciles them, bank reconciliation practice, controls over changing vendor payment details, the limits and deductibles chosen, and prior losses. Two things move it more than owners expect. Separation of duties, because a single person controlling the whole payment cycle is the highest-frequency pattern there is. And bonding capacity is cumulative — what you can get next year depends on what you did with this year. This isn't a quote or a guarantee.
What usually sits next to it.
Surety bond and crime coverage questions.
What is a surety bond, and how is it different from insurance?
A surety bond is a three party guarantee rather than a two party risk transfer, and that structure explains almost everything else about it. Insurance involves you and a carrier, and the carrier accepts a risk in exchange for premium. A bond involves three parties. The principal is the business whose performance is being guaranteed. The obligee is the party protected by the bond, typically a project owner, a government agency or a licensing authority. The surety is the company standing behind the principal's obligation.
The critical difference is who the bond protects. It does not protect the business that pays for it. It protects the obligee against the principal's failure to perform or to pay. Because of that, sureties are not pricing expected losses the way an insurer does. They are extending credit, and they underwrite it as credit, which is why the application looks more like a bank submission than an insurance application.
Do I have to pay back a surety bond claim?
Generally yes, and this is the single most important thing to understand before signing anything. Surety is built on indemnity. When a bond is written, the principal signs a general indemnity agreement obliging it to reimburse the surety for losses, costs and expenses the surety incurs under the bond, and on most small and mid sized accounts the owners sign personally as well, sometimes together with their spouses and affiliated entities. So when a surety pays a claim, it generally has a contractual right to recover that money from the principal and the personal indemnitors. It is not risk transfer in the way an insurance policy is.
The practical consequence is that a bond is a statement of confidence rather than a financial cushion. The surety is saying it believes you will perform, and it is protecting itself if you do not. Read the indemnity agreement before you sign it, understand who else is being asked to sign, and treat a bond claim as a serious business event rather than an insurance event. This is general information and not legal advice, and an indemnity agreement is a contract worth having counsel review.
What bonds are required on Arkansas public works projects?
Arkansas has its own version of the federal Miller Act, commonly called the Little Miller Act, at Arkansas Code sections 22-9-401 through 22-9-405, with companion provisions in title 18. Broadly it requires contractors on public works projects above a statutory threshold to furnish bonds securing performance of the work and payment of subcontractors, laborers and suppliers. That payment protection matters more on public work than on private work, because a mechanics lien generally cannot be placed against public property, so the bond is frequently the only realistic remedy for an unpaid sub or supplier.
Two provisions are worth knowing specifically. Bonds under the chapter must be written by surety companies qualified and authorized to do business in Arkansas and listed on the current United States Department of the Treasury listing of approved sureties, and the executing agent must be licensed by the Insurance Commissioner and must file the power of attorney with the bond. And the liability the statute imposes is deemed an integral part of the bond whether or not it is spelled out in the bond itself, so the statutory terms are read in regardless of the wording. Thresholds and claim deadlines are set by statute and should be confirmed against the current code and with counsel rather than taken from any summary.
How quickly can a subcontractor be required to produce a bond in Arkansas?
Faster than a bonding relationship can be created, which is why this catches subcontractors out. Under the Arkansas public works bonding provisions, where the general contractor requires it, a subcontractor must furnish a payment and performance bond, or a cash bond, equal to the full amount of its bid on a portion of a public works contract when three things are true. The subcontractor is the low responsible bidder for that portion. The state requires the general contractor to list the subcontractor in its bid. And the work value of the subcontractor's bid exceeds fifty thousand dollars. The subcontractor must then provide the bond to the general contractor within five days after the award.
Five days is the part that matters. Surety underwriting is a credit process rather than a form to fill in. A first time submission commonly involves business and personal financial statements, a work in progress schedule, bank and supplier references, and a general indemnity agreement, and none of that assembles itself in a working week. The practical answer is to establish the surety relationship before you bid public work, not after you win it. Statutory requirements should be confirmed against the current code.
What does fidelity or crime coverage protect against?
Commercial crime coverage, still often called fidelity, protects the business itself against loss of its own money, securities and property caused by dishonest acts. The insuring agreements typically offered include employee theft, which is the core one and covers dishonest acts by your own employees; forgery or alteration of checks and similar instruments; theft of money and securities inside the premises and outside the premises; computer fraud; and funds transfer fraud, where a fraudulent instruction causes your bank to transfer money.
This is the coverage most business owners assume is somewhere in their package and frequently is not, or is present at a token limit nobody chose deliberately. General liability responds to third party claims and does not cover theft by your own staff. Property coverage responds to damage and carries only limited money and securities coverage. Employee theft is a first party financial loss, and it needs its own insuring agreement. Worth checking three things on your current program. Whether employee theft is present at all, what limit it carries, and how the policy defines employee, since temporary staff, volunteers, contractors and recently departed employees are not always included.
Does crime coverage pay if an employee is tricked into wiring money?
Often not under the core insuring agreements, and this is the most consequential gap on the line right now. In a social engineering loss, nobody breaks in and no employee steals anything. Someone impersonates an executive, a vendor or a client, and a legitimate employee is deceived into authorizing a transfer or changing payment instructions. Because the employee acted with authority and parted with the funds voluntarily, the loss frequently falls outside employee theft, outside computer fraud, and outside funds transfer fraud as those agreements are commonly written.
Coverage for it is usually addressed by a separate social engineering or deception fraud endorsement, and it typically carries its own sublimit that is much smaller than the main crime limit, along with conditions such as requiring callback verification of payment instruction changes. Wording and availability vary considerably between carriers, so this is one to confirm specifically rather than assume. It is also one of the few exposures where a process change genuinely reduces the risk. Verifying any change to payment details by a known telephone number, rather than by replying to the request, prevents most of these losses outright.
Does my business need an ERISA fidelity bond for its retirement plan?
If your business sponsors a retirement plan, then almost certainly yes, and it is required by federal law rather than by anyone's preference. Section 412 of the Employee Retirement Income Security Act requires that every fiduciary of an employee benefit plan, and every person who handles funds or other property of the plan, be bonded. Handling generally means having authority to transfer funds, negotiate property for value, or disburse or direct the disbursement of plan assets, so it commonly reaches owners, officers, plan committee members and certain service providers.
The required amount is at least ten percent of the funds that person handled in the preceding year, subject to a minimum of one thousand dollars per plan and a maximum of five hundred thousand dollars per plan, rising to one million dollars for plans holding employer securities. Two details are frequently missed. The plan itself must be a named insured, not the sponsoring company and not the plan administrator. And compliance is reported annually on Form 5500, so a missing or undersized bond is visible to the Department of Labor on the face of your own filing. Unfunded plans paying benefits solely from general assets are treated differently. Confirm your specific obligations with your plan advisor or counsel.
Is an ERISA fidelity bond the same as fiduciary liability insurance?
No, and the Department of Labor has addressed this directly because the confusion is so common. They protect different parties against different things and one is not a substitute for the other. An ERISA fidelity bond protects the plan against loss caused by fraud or dishonesty on the part of the people who handle its funds. It is required by section 412. Fiduciary liability insurance protects the fiduciaries themselves against claims alleging a breach of their fiduciary responsibilities, such as imprudent investment selection or excessive fees.
Department of Labor guidance states that fiduciary liability insurance is neither required by nor subject to section 412, and Form 5500 instructions provide that a fiduciary liability policy cannot be reported as fidelity bond coverage. So a business can carry a fiduciary liability policy, believe it has satisfied the bonding requirement, and be out of compliance. Most plan sponsors that take this seriously end up carrying both, because they answer entirely different questions. The bond answers who repays the plan if someone steals from it. The insurance answers who defends you if someone says you ran the plan badly.
What is a license or permit bond?
It is a commercial surety bond required by a government body as a condition of holding a license or a permit, and it exists to protect the public rather than the business buying it. Common examples include contractor license bonds, motor vehicle dealer bonds, notary bonds, alcohol and tobacco bonds, freight broker bonds, collection agency bonds and various municipal permit bonds for work in the public right of way. The obligee is the licensing authority, and the bond generally guarantees that the license holder will comply with the statute or ordinance the license is issued under. If someone is harmed by a violation, they may be able to claim against the bond.
Two points follow from that structure. The bond is not liability insurance and it does not protect the license holder, so a business still needs its own general liability and other coverages. And as with all surety, the principal indemnifies the surety, so a paid claim on a license bond is money the business is generally expected to repay. These bonds are usually inexpensive and quickly issued for applicants with reasonable credit, which sometimes leads people to assume they are insurance. They are not.
How do I get a bond or crime coverage quote?
Start the commercial quote form or call (479) 286-1066, and expect the two halves to be handled differently, because they are underwritten differently. For surety, plan on a credit style submission. Useful to have: business financial statements for the last several years, ideally reviewed or audited for larger contract programs, an interim statement, a work in progress and completed jobs schedule for contract surety, personal financial statements for the owners, bank and supplier references, a resume of the business and its key people, the bond form the obligee requires, and the contract or the bid documents. For a license or permit bond, the bond form and the licensing authority's requirements are usually enough.
For crime and fidelity, the questions are about controls rather than credit. Useful to have: employee count, who has authority to move money and approve payments, whether duties are separated between the person who authorizes and the person who reconciles, how bank accounts are reconciled and by whom, what your process is for changing vendor payment instructions, whether you sponsor a retirement plan and what it holds, and any prior losses. If you already carry crime coverage, send the declarations page and the forms list.
If our coverage explainers are useful, mark Cribb Insurance as a preferred source so more Arkansas contractors and business owners can find our local, plain-English guides.
Get prequalified before you need the bond.
For surety, send financial statements, a work-in-progress schedule and the bond form the obligee wants — and let's do it before a bid, not after an award. For crime, tell us who can move money, who reconciles the accounts, whether those are the same person, and whether you sponsor a retirement plan. That last question takes ten seconds and the answer surprises people more often than it should.
Cribb Insurance Group Inc. is an independent insurance agency licensed in Arkansas, Oklahoma, Missouri and Texas. This page describes surety bonds and commercial crime and fidelity coverage in general, industry-standard terms for informational purposes only. It is not a bond, not a policy, not an offer of insurance or of surety credit, and not a guarantee of coverage, availability, eligibility, capacity, approval, or price. It is not legal, tax, accounting or ERISA advice, and it is not a legal opinion. Agency licensure is not the same as carrier or surety appointment; product and market availability differ by state, by class of bond and over time. Surety is extended at the surety's sole discretion and is subject to underwriting, financial review and credit approval.
About surety. A surety bond is a three-party guarantee and is not insurance for the principal. The obligations of the principal and any indemnitors, including any general indemnity agreement and any personal, spousal or affiliate indemnity, are set by the documents actually signed and can require full reimbursement of amounts the surety pays, together with costs, expenses and fees. Bond forms are commonly prescribed by the obligee and their terms control. Nothing on this page should be relied on in deciding whether to sign an indemnity agreement; that is a contract and it warrants review by qualified counsel.
About crime and fidelity coverage. Commercial crime policies are not standardized and vary substantially between carriers. The insuring agreements purchased, the definition of employee and of covered property, limits, sublimits, deductibles, territory, discovery versus loss-sustained triggers, discovery periods, prior-loss and prior-carrier conditions, and all exclusions are set by the carrier and apply only as written in the policy actually issued to you. Coverage for social engineering or deception fraud, temporary or leased workers, volunteers, independent contractors, former employees, clients' property, cyber events, credit card fraud and losses discovered after a policy ends is not automatic and must be confirmed in the applicable policy.
About the law described on this page. References to the Arkansas public works bonding provisions, Ark. Code §§ 22-9-401 through 22-9-405 and related sections, and to section 412 of the Employee Retirement Income Security Act, 29 C.F.R. Part 2580, related Department of Labor guidance and Form 5500 reporting, are general summaries provided for information only. They are not a determination that any bonding requirement applies to any project, bid, business or benefit plan, that any threshold is met, or that any deadline applies. No general Little Miller Act contract threshold is published on this page because available secondary sources conflict as to what it is; thresholds, notice requirements and claim deadlines must be confirmed against the current Arkansas Code and with qualified construction counsel. ERISA bonding obligations depend on the plan, its assets, who handles them and the exemptions that may apply, and should be confirmed with your plan advisor, third-party administrator or counsel. An ERISA fidelity bond and fiduciary liability insurance are different products serving different purposes, and neither substitutes for the other. Statutes and regulations are amended and are subject to interpretation. Oklahoma, Missouri and Texas have their own public works bonding and licensing statutes, which differ from Arkansas's; ERISA is federal and applies without regard to state.
The interactive exposure matcher is an educational illustration only. It does not evaluate your business, financial position, controls, contracts, plan compliance or insurance needs, does not determine eligibility, bonding capacity or coverage, and does not calculate, recommend or suggest a bond amount, a limit of insurance or a coverage amount. No premium figures, rate ranges, eligibility thresholds or carrier underwriting criteria are published on this page; statutory and regulatory figures are reproduced as general information only. Any cost or coverage descriptions are general and illustrative, not a quote, and not a guarantee. Market availability referenced as "40+ carriers" reflects the agency's overall market access across personal and commercial lines.
Last reviewed July 2026.
